$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: elNLGsgxsiLKJatXCRrNhqhMQ124U9rWojCi0CGJVmc= Subject key identifier: 49:AB:68:4C:53:B0:BA:20:4B:F1:56:95:8F:9B:CB:C3:9E:80:9D:E6 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 271E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 26CF Signing time: Fri 22 Nov 2024 15:41:06 +0000 Manifest this update: Fri 22 Nov 2024 15:41:05 +0000 Manifest next update: Fri 29 Nov 2024 15:41:05 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: zKMDmoRdqt/pmqlhg6MjFWY4lFBi8kxZbFJnSlVa5+8=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: UoNQyiMbzRM8LTAnCH5+6vt93Lw53vJESQHvBWYcjss=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: cpPBl2HZl2WMGx0/E7w0QxRgBvloFKsPNiFCwchG+b8=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: gUaglzjVEo/jAQam5U3T7T5H9G5lSnkvKcItCzMbsY0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: lXtCcZI3WY8OIlNn2pthb5U4nO4x25l4CIfkoHRn3ik=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: g3qXc5xzXRuZuGvrf+0l5unc13/FwmeQdJGJ36GeWJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10014 (0x271e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Nov 22 15:41:05 2024 GMT Not After : Nov 29 15:41:05 2024 GMT Subject: CN=6740a611-6597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:39:af:88:39:8b:09:df:13:27:2c:b8:78: 58:97:f1:fa:2e:09:68:ce:18:85:3f:36:b6:1e:8e: 55:2d:af:2f:91:24:3e:83:1f:fe:b9:74:ee:f6:25: 41:3d:9f:b5:f2:ea:b7:52:89:b6:93:98:cb:9c:6d: ad:4b:b7:e7:de:4a:c3:d7:e4:d1:0d:51:f0:cb:af: b9:45:95:d6:70:3c:fe:e6:da:85:4e:3e:34:db:f8: 0b:a2:36:ec:3f:53:04:3c:21:89:fa:61:79:8f:26: 8c:af:7a:08:0c:57:72:0d:fe:50:8c:0c:fe:b9:69: bb:d4:73:a4:50:9a:c9:dd:b2:02:4e:dc:67:f9:90: 30:3f:91:6a:8e:c3:61:fa:9d:ed:65:2e:18:b7:50: bf:74:e1:4f:b2:f6:02:ab:8e:d3:b7:91:56:c5:18: d0:1c:37:26:92:2f:7c:54:1d:55:34:04:03:f3:62: 6e:3e:b3:1c:59:6e:86:fc:8a:d9:76:c7:2f:f2:ab: a5:74:fd:e8:b6:e5:5d:a6:a1:99:77:d1:f5:71:51: 49:67:0b:9b:d3:e7:f2:79:9c:39:3b:1a:a6:37:af: 71:5a:fc:d6:29:2e:29:3c:87:e6:4f:be:ba:e0:28: e1:65:93:f7:19:ba:27:bc:48:91:96:19:bb:04:c7: 2e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AB:68:4C:53:B0:BA:20:4B:F1:56:95:8F:9B:CB:C3:9E:80:9D:E6 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e7:e5:da:87:14:bf:8b:0b:d6:1f:a7:ef:47:d3:87:95:bf: fc:d4:30:6c:97:ad:9e:af:36:40:42:5e:99:7d:7b:0c:4a:9d: 20:20:c4:06:7d:8b:25:c0:bf:11:59:d2:54:fd:70:57:a7:58: 94:25:59:79:92:f3:d9:02:29:d2:21:dc:85:22:b2:6a:c2:20: 7c:a9:a4:a2:9c:94:6e:45:7f:3d:2f:b1:a2:37:ab:3b:87:c1: 69:6e:b0:1d:74:22:43:7a:59:f1:30:e8:91:ec:36:05:a3:f8: a4:4f:82:29:34:bc:9e:53:38:e9:ed:f4:05:91:11:83:64:b7: 2a:a3:38:63:ee:da:41:9c:1a:95:df:75:53:e7:41:f5:b2:b7: ec:aa:b3:30:45:60:72:38:cb:8f:37:e9:40:df:82:be:9c:c2: 11:6b:74:5f:d2:8d:ca:b6:88:0a:aa:2a:43:6e:12:c9:ef:71: 56:b1:63:e2:5e:38:c8:3a:ae:32:e8:ac:f8:75:02:80:3d:f9: 51:b2:76:44:f2:b8:0e:a1:dd:c2:64:40:d7:42:42:18:98:9c: 77:6d:1e:c5:26:26:25:ab:5d:af:3b:c3:25:33:bb:1c:a6:12: 3b:76:60:97:0b:45:98:df:c6:7f:da:a1:16:32:33:6f:76:88: e4:c6:1f:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjQxMTIyMTU0MTA1WhcNMjQxMTI5MTU0MTA1WjAYMRYwFAYD VQQDEw02NzQwYTYxMS02NTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26A5r4g5iwnfEycsuHhYl/H6LglozhiFPza2Ho5VLa8vkSQ+gx/+uXTu9iVB PZ+18uq3Uom2k5jLnG2tS7fn3krD1+TRDVHwy6+5RZXWcDz+5tqFTj402/gLojbs P1MEPCGJ+mF5jyaMr3oIDFdyDf5QjAz+uWm71HOkUJrJ3bICTtxn+ZAwP5FqjsNh +p3tZS4Yt1C/dOFPsvYCq47Tt5FWxRjQHDcmki98VB1VNAQD82JuPrMcWW6G/IrZ dscv8quldP3otuVdpqGZd9H1cVFJZwub0+fyeZw5OxqmN69xWvzWKS4pPIfmT766 4CjhZZP3GbonvEiRlhm7BMcuWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmraExT sLogS/FWlY+by8OegJ3mMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL5+XahxS/iwvWH6fvR9OHlb/81DBsl62erzZAQl6ZfXsMSp0gIMQG fYslwL8RWdJU/XBXp1iUJVl5kvPZAinSIdyFIrJqwiB8qaSinJRuRX89L7GiN6s7 h8FpbrAddCJDelnxMOiR7DYFo/ikT4IpNLyeUzjp7fQFkRGDZLcqozhj7tpBnBqV 33VT50H1srfsqrMwRWByOMuPN+lA34K+nMIRa3Rf0o3KtogKqipDbhLJ73FWsWPi XjjIOq4y6Kz4dQKAPflRsnZE8rgOod3CZEDXQkIYmJx3bR7FJiYlq12vO8MlM7sc phI7dmCXC0WY38Z/2qEWMjNvdojkxh8K -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org